James-
My understanding is that quantity of transactions does not matter. The main
concern is security and customer control of any stored personal information on
any system.
Best,
Scott
On 2/7/18, 2:27 PM, "mcn-l on behalf of Heck, James" <mcn-l-boun...@mcn.edu on
behalf of james_h...@moma.org> wrote:
I am awaiting for more details on this from our internal and outside
counsel as we too are reviewing impact as well. However I thought that if
a EU citizen buys something even in person while in the US their data was
still in scope if you knew it was a EU citizen. But I also believe that if
it is one person or many that the full system needs to comply with GDPR if
all on the same system.
James
------------------
*James J. Heck*Director of Technology
Information Technology
The Museum of Modern Art
11 West 53rd Street
New York, NY 10019
Single number reach: +1 212 708 9554
Trying to schedule a meeting with me? Check my availability here
<https://www.google.com/calendar/embed?src=james_h...@moma.org&mode=week&ctz=America/New_York&&title=James%20Heck%20%28MoMA%20Calendar%20-%20Eastern%20Time%20Zone%29>
!
On Wed, Feb 7, 2018 at 2:23 PM, Nik Honeysett <nhoneys...@bpoc.org> wrote:
> Also, GDPR wouldn’t apply if they purchased from your website while they
> were in a hotel next door to you.
> -nik
>
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>
> Nik Honeysett | Chief Executive Officer | BPOC | www.bpoc.org
>
>
> M (805) 402-3326 P (619) 331-1974 E nhoneys...@bpoc.org <mailto:
> nhoneys...@bpoc.org>
> 1549 El Prado, Suite 8, San Diego, CA 92101
>
> A non-profit technology collaboration connecting audiences to art, culture
> & science.
>
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>
>
>
>
>
>
>
> > On Feb 7, 2018, at 11:20 AM, Nik Honeysett <nhoneys...@bpoc.org> wrote:
> >
> > My understanding is that GDPR is enforced based on the location of the
> transactee at the time of the transaction, irrespective of where the
server
> is. So, if someone buys something from your website from Blighty, then
GDPR
> is in effect for you and their PII, but if that person physically buys
from
> your store, then GDPR does not apply.
> > -nik
> >
> > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> >
> > Nik Honeysett | Chief Executive Officer | BPOC | www.bpoc.org <
> http://www.bpoc.org/>
> > M (805) 402-3326 P (619) 331-1974 E nhoneys...@bpoc.org <mailto:
> nhoneys...@bpoc.org>
> > 1549 El Prado, Suite 8, San Diego, CA 92101
> >
> > A non-profit technology collaboration connecting audiences to art,
> culture & science.
> >
> > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> >
> >
> >
> >
> >
> >
> >
> >> On Feb 7, 2018, at 11:15 AM, Sayre, Scott A <sayr...@cmog.org <mailto:
> sayr...@cmog.org>> wrote:
> >>
> >> Nik-
> >> Thanks for chiming in. We have a significant customer-base (ecommerce,
> online/physical visitors and students) from the EU. Our read is that any
> transaction between a US organization and a citizen of the EU falls under
> the GDPR, even the transactions take place on a server here in the US.
> >> -Scott
> >>
> >> On 2/7/18, 12:35 PM, "mcn-l on behalf of Nik Honeysett" <
> mcn-l-boun...@mcn.edu <mailto:mcn-l-boun...@mcn.edu> on behalf of
> nhoneys...@bpoc.org <mailto:nhoneys...@bpoc.org>> wrote:
> >>
> >> Scott,
> >>
> >> Do you have a significant percentage of online sales or data capture
> in the EU?
> >> -nik
> >>
> >> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> >>
> >> Nik Honeysett | Chief Executive Officer | BPOC | www.bpoc.org <
> http://www.bpoc.org/>
> >>
> >>
> >> M (805) 402-3326 P (619) 331-1974 E nhoneys...@bpoc.org <mailto:
> nhoneys...@bpoc.org> <mailto:nhoneys...@bpoc.org <mailto:
> nhoneys...@bpoc.org>>
> >> 1549 El Prado, Suite 8, San Diego, CA 92101
> >>
> >> A non-profit technology collaboration connecting audiences to art,
> culture & science.
> >>
> >> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> >>
> >>
> >>
> >>
> >>> On Feb 7, 2018, at 8:54 AM, Sayre , Scott A <sc...@sandboxstudios.org
> <mailto:sc...@sandboxstudios.org>> wrote:
> >>>
> >>> Hi Folks-
> >>> We are in the early stages of preparing a strategy to comply with the
> May 28th deadline for complying the EU’s General Data Protection
> Regulations (https://www.eugdpr.org/ <https://www.eugdpr.org/> <
> https://www.eugdpr.org/ <https://www.eugdpr.org/>>). Hoping most of you
> are familiar with these requirements and may have some thoughts on how you
> will be responding to them. We are still working on defining requirements
> vs. recommended practices and how and when we will be able to address
> them. It appears this could affect our user data practices in e-commerce,
> blog, e-commerce (ticketing and retail), as well as CRM.
> >>> I’d love to hear how others have begun to work on meeting these
> regulations and if you have found any external expertise to guide you
> through the process.
> >>> Many thanks in advance.
> >>> -Scott
> >>>
> >>>
> >>>
> >>> _______________________________________________
> >>> You are currently subscribed to mcn-l, the listserv of the Museum
> Computer Network (http://www.mcn.edu <http://www.mcn.edu/>)
> >>>
> >>> To post to this list, send messages to: mcn-l@mcn.edu <mailto:
> mcn-l@mcn.edu>
> >>>
> >>> To unsubscribe or change mcn-l delivery options visit:
> >>> http://mcn.edu/mailman/listinfo/mcn-l <http://mcn.edu/mailman/
> listinfo/mcn-l>
> >>>
> >>> The MCN-L archives can be found at:
> >>> http://www.mail-archive.com/mcn-l@mcn.edu/
> >>
> >> _______________________________________________
> >> You are currently subscribed to mcn-l, the listserv of the Museum
> Computer Network (http://www.mcn.edu <http://www.mcn.edu/>)
> >>
> >> To post to this list, send messages to: mcn-l@mcn.edu <mailto:
> mcn-l@mcn.edu>
> >>
> >> To unsubscribe or change mcn-l delivery options visit:
> >> http://mcn.edu/mailman/listinfo/mcn-l <http://mcn.edu/mailman/
> listinfo/mcn-l>
> >>
> >> The MCN-L archives can be found at:
> >> http://www.mail-archive.com/mcn-l@mcn.edu/ <
> http://www.mail-archive.com/mcn-l@mcn.edu/>
> >>
> >>
> >> _______________________________________________
> >> You are currently subscribed to mcn-l, the listserv of the Museum
> Computer Network (http://www.mcn.edu <http://www.mcn.edu/>)
> >>
> >> To post to this list, send messages to: mcn-l@mcn.edu <mailto:
> mcn-l@mcn.edu>
> >>
> >> To unsubscribe or change mcn-l delivery options visit:
> >> http://mcn.edu/mailman/listinfo/mcn-l <http://mcn.edu/mailman/
> listinfo/mcn-l>
> >>
> >> The MCN-L archives can be found at:
> >> http://www.mail-archive.com/mcn-l@mcn.edu/ <
> http://www.mail-archive.com/mcn-l@mcn.edu/>
>
> _______________________________________________
> You are currently subscribed to mcn-l, the listserv of the Museum Computer
> Network (http://www.mcn.edu)
>
> To post to this list, send messages to: mcn-l@mcn.edu
>
> To unsubscribe or change mcn-l delivery options visit:
> http://mcn.edu/mailman/listinfo/mcn-l
>
> The MCN-L archives can be found at:
> http://www.mail-archive.com/mcn-l@mcn.edu/
>
_______________________________________________
You are currently subscribed to mcn-l, the listserv of the Museum Computer
Network (http://www.mcn.edu)
To post to this list, send messages to: mcn-l@mcn.edu
To unsubscribe or change mcn-l delivery options visit:
http://mcn.edu/mailman/listinfo/mcn-l
The MCN-L archives can be found at:
http://www.mail-archive.com/mcn-l@mcn.edu/
_______________________________________________
You are currently subscribed to mcn-l, the listserv of the Museum Computer
Network (http://www.mcn.edu)
To post to this list, send messages to: mcn-l@mcn.edu
To unsubscribe or change mcn-l delivery options visit:
http://mcn.edu/mailman/listinfo/mcn-l
The MCN-L archives can be found at:
http://www.mail-archive.com/mcn-l@mcn.edu/
